Chat now with support
Chat with Support

Security Explorer 9.8 - User Guide

Getting Started with Security Explorer Managing permissions Searching Managing security Managing objects
Managing folders and files Managing shares Managing registry keys Managing services Managing tasks Managing groups and users Managing Favorites Managing Enterprise Scopes Updating licenses Managing network drives
Working with Microsoft SQL Server Working with Microsoft Exchange
Checking minimum requirements Viewing Exchange permissions Granting Exchange permissions Revoking Exchange permissions Cloning Exchange permissions Searching for Exchange server objects and permissions Backing up and restoring Exchange server security Modifying Exchange permissions Managing Exchange group memberships Exporting Exchange security permissions Creating Exchange databases Creating public folder mailboxes Managing Exchange administrators Managing Exchange distribution groups Managing mail contacts Managing mail users Managing mailboxes Managing mailbox folders Managing public folders Using role based access control Setting options for Exchange security
Working with Microsoft SharePoint Working with Access Explorer Working with Microsoft Active Directory Customizing Security Explorer Using the command line Using PowerShell cmdlets Troubleshooting

Editing service accounts

You can change the password on a service account and reassign the default account. A green check mark displays next to the service account that is used as the default account to access any domains that cannot be reached through the current configuration. See Adding service accounts and Deleting service accounts.

1
Select Tools | Access Explorer Configuration.
2
Click Configure Access Explorer.
3
Open the Configuration tab, if necessary.
4
Click Configure service accounts for Access Explorer.
6
Click Edit.
9

Deleting service accounts

Once you have set up the Access Explorer database and your first managed domain, you may delete service accounts.

1
Select Tools | Access Explorer Configuration.
2
Click Configure Access Explorer.
3
Open the Configuration tab, if necessary.
4
Click Add new Service Accounts.
6
Click Delete.
7
Click OK to confirm deletion of the service account.
8
Click Refresh to update the display.

Collecting Access Explorer data

The Access Explorer agents collect data on only the computers you choose to manage. You can choose which folders the Access Explorer agent scans on the managed computer and you can set the schedule when the scan occurs.

Topics:

Setting up a managed computer

A managed computer is one that is scanned by the Access Explorer agent for security data. When you add a managed computer, you have the option of installing a local agent on the same computer or configuring a remote agent installed on another computer. If you install a locally managed computer, you can automatically install the agent with the computer, or install the agent manually later.

If you choose to add a remote agent to a managed computer, the first remote agent must be configured during the deployment of the managed computer. You can add more remote agents later, if needed.

Figure 2 depicts the possible deployment scenarios for Access Explorer agents and managed computers in remote and local installations.

A locally managed computer is one on which the Access Explorer agent is installed and scanning security data on the same server. Local installation is available only for Windows® Servers. With a local installation, you also can choose automatic or manual installation. See Installing the Access Explorer agent locally.

A remotely managed computer is one that has its security data scanned and collected by Access Explorer agents running on different servers. Other than Windows® Servers, all other server types require remote installation. There is no option to install the agent manually. See Installing the Access Explorer agent remotely.

Related Documents